workflow releases

.forgejo/workflows/build-image.yml

@@ -0,0 +1,82 @@
+name: "Build & Upload NixOS Proxmox Image"
+
+on:
+  push:
+    tags:
+      - "v*" # triggers on v1.0.0, v1.2.3, etc.
+  workflow_dispatch:
+
+jobs:
+  build-upload:
+    runs-on: nixos-latest
+    env:
+      PROXMOX_HOST: 192.168.1.205
+      PROXMOX_USER: forgejo-runner
+      TEMPLATE_VMID: 9001
+      LATEST_TEMPLATE_VMID: 9000
+
+    steps:
+      - name: Install nodejs
+        run: nix-env -iA nixpkgs.nodejs
+
+      - name: Checkout repo
+        uses: actions/checkout@v4
+
+      - name: Set VERSION from tag or fallback
+        run: |
+          if [ -n "${CI_COMMIT_TAG}" ]; then
+            echo "VERSION=${CI_COMMIT_TAG}" >> $GITHUB_ENV
+          else
+            echo "VERSION=dev-$(date +%s)" >> $GITHUB_ENV
+          fi
+
+      - name: Build NixOS image
+        run: nix build .#base --builders "ssh://root@nixos-builder.lab x86_64-linux"
+
+      - name: Prepare SSH
+        env:
+          PROXMOX_SSH_KEY: ${{ secrets.PROXMOX_SSH_KEY }}
+        run: |
+          mkdir -p ~/.ssh
+          echo "$PROXMOX_SSH_KEY" > ~/.ssh/id_rsa
+          chmod 600 ~/.ssh/id_rsa
+          ssh-keyscan -H $PROXMOX_HOST >> ~/.ssh/known_hosts
+
+      # - name: Upload image to Proxmox and manage templates
+      #   run: |
+      #     set -e
+      #     IMAGE="result/vm-image.vma.zst"
+      #     REMOTE_NAME="nixos-base-image-${VERSION}.vma.zst"
+      #     REMOTE_PATH="/var/lib/vz/template/images/$REMOTE_NAME"
+
+      #     echo "Uploading $IMAGE to Proxmox as $REMOTE_NAME"
+      #     scp $IMAGE $PROXMOX_USER@$PROXMOX_HOST:$REMOTE_PATH
+
+      #     echo "Restoring as VMID $TEMPLATE_VMID"
+      #     ssh $PROXMOX_USER@$PROXMOX_HOST "
+      #       qm destroy $TEMPLATE_VMID --purge || true
+      #       qmrestore $REMOTE_PATH $TEMPLATE_VMID --unique
+      #       qm template $TEMPLATE_VMID
+
+      #       echo 'Cloning to $LATEST_TEMPLATE_VMID as latest'
+      #       qm destroy $LATEST_TEMPLATE_VMID --purge || true
+      #       qm clone $TEMPLATE_VMID $LATEST_TEMPLATE_VMID --name nixos-base-latest
+      #     "
+
+      # - name: Prune old templates
+      #   run: |
+      #     ssh $PROXMOX_USER@$PROXMOX_HOST "
+      #       cd /var/lib/vz/template/images
+      #       ls -tp nixos-base-image-*.vma.zst | grep -v '/$' | tail -n +6 | xargs -r rm --
+      #     "
+
+      # - name: Create Forgejo Release (optional)
+      #   if: ${{ github.ref_type == 'tag' }}
+      #   uses: softprops/action-gh-release@v1
+      #   with:
+      #     name: "NixOS Base Image ${{ env.VERSION }}"
+      #     tag_name: ${{ env.VERSION }}
+      #     body: |
+      #       This release contains the NixOS base image for Proxmox labeled `${{ env.VERSION }}`.
+      #     files: |
+      #       result/vm-image.vma.zst